Vulnerabilidades em Significant-Gravitas

40 resultados
Análise Vexday

A Significant-Gravitas apresenta 32 vulnerabilidades cadastradas, com 17 publicadas nos últimos 90 dias, indicando atividade recente de descoberta de falhas. Nenhuma CVE está sob exploração ativa conhecida (KEV), mas 3 vulnerabilidades críticas (CVSS) e a prevalência de CWE-400 (Uncontrolled Resource Consumption) sugerem riscos de negação de serviço que devem ser monitorados. O ritmo de divulgações mantém este fornecedor em zona de atenção para gestão de patches.

CVE-2024-8156HIGHCommand Injection in significant-gravitas/autogptEPSS 1.7%CVE-2025-1040HIGHServer-Side Template Injection (SSTI) in significant-gravitas/autogptEPSS 1.6%CVE-2024-1881HIGHImproper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogptEPSS 1.4%CVE-2026-24780HIGHAutoGPT is Vulnerable to RCE via Disabled Block ExecutionEPSS 1.1%CVE-2024-1880HIGHOS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogptEPSS 1.0%CVE-2024-6091CRITICALShell Command Denylist Bypass in significant-gravitas/autogptEPSS 0.8%CVE-2025-22603HIGHAutoGPT SSRF vulnerabilityEPSS 0.6%CVE-2025-0454HIGHSSRF Check Bypass in Requests Utility in significant-gravitas/autogptEPSS 0.5%CVE-2025-32392HIGHAutoGPT has a DoS vulnerability in LoopVideoBlockEPSS 0.5%CVE-2024-10457MEDIUMSSRF Vulnerabilities in significant-gravitas/autogptEPSS 0.5%CVE-2024-1879HIGHCSRF to RCE in significant-gravitas/autogptEPSS 0.5%CVE-2026-26020CRITICALAutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)EPSS 0.5%CVE-2026-26006MEDIUMRedos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogptEPSS 0.5%CVE-2025-31490HIGHAutoGPT allows SSRF due to DNS Rebinding in requests wrapperEPSS 0.5%CVE-2025-31491HIGHAutoGPT allows leakage of cross-domain cookies and protected headers in requests redirectEPSS 0.5%CVE-2023-37275LOWSystem logs spoofable in Auto-GPT via ANSI control sequencesEPSS 0.4%CVE-2025-53944HIGHAutoGPT Platform Exposes Graph Execution Results via Authorization GapEPSS 0.4%CVE-2026-22038HIGHAutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration BlocksEPSS 0.4%CVE-2025-32424HIGHAutoGPT has a DoS vulnerability in ScreenshotWebPageBlockEPSS 0.4%CVE-2025-32422HIGHAutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlockEPSS 0.4%